Article starts from "don't sanitize input" but in the middle : > If you’re not using Markdown but want to let your users enter HTML directly, you only have the

Article starts from "don't sanitize input" but in the middle : > If you’re not using Markdown but want to let your users enter HTML directly, you only have the second option – you must filter using a whitelist. So "don't filter but filter"